On 21/05/18 15:14, James Peng via Openvpn-users wrote:
> I am now testing my my dd-wrt router OpenVPN server.

Again, I STRONGLY advice against using DD-WRT on any publicly available IP
address.  From my point of view, the company behind this firmware has _NO_
real understanding of security and security policies.

> Mon May 21 20:29:40 2018 us=415428 Attempting to establish TCP connection
> with [AF_INET]209.6.118.XXX:1194 [nonblock]
> Mon May 21 20:29:40 2018 us=415428 MANAGEMENT:
>> STATE:1526905780,TCP_CONNECT,,,,,,
> Mon May 21 20:29:41 2018 us=416743 TCP connection established with
> [AF_INET]209.6.118.XXX:1194
> Mon May 21 20:29:41 2018 us=416743 TCP_CLIENT link local: (not bound)
> Mon May 21 20:29:41 2018 us=416743 TCP_CLIENT link remote:
> [AF_INET]209.6.118.XXX:1194
> Mon May 21 20:29:41 2018 us=416743 MANAGEMENT: >STATE:1526905781,WAIT,,,,,,
> Mon May 21 20:29:41 2018 us=428738 Connection reset, restarting [-1]
> Mon May 21 20:29:41 2018 us=428738 TCP/UDP: Closing socket
> Mon May 21 20:29:41 2018 us=428738 SIGUSR1[soft,connection-reset] received,
> process restarting
> Mon May 21 20:29:41 2018 us=429738 MANAGEMENT:
>> STATE:1526905781,RECONNECTING,connection-reset,,,,,
> Mon May 21 20:29:41 2018 us=429738 Restart pause, 5 second(s)

Server log file would be helpful as well, but this does smell like a firewall
issue somewhere.  It can be both on your router and somewhere on the site
you're connecting from.  The hints are the connection restarts.

I also see you use TCP.  That is also not recommended.  Routed TUN over UDP
gives the best performing VPN tunnels for most users.


--
kind regards,

David Sommerseth

Attachment: signature.asc
Description: OpenPGP digital signature

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users

Reply via email to